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1 5. A method for reducing the risk of unauthorized access p a data product, the method 

2 comprising: 

3 a step for conveying a permit from a source to a/consumer subsystem without conveying 
indicia of identification of the source, conveying being in response to a first notice that payment 

5 for the permit has been assured by a first provided process, assuring being in response to 

6 receiving at the first provided process a request for the permit that originated from the consumer 

7 subsystem, the request for the permit being without indicia of the identification of the source; 

8 and 

a step for conveying a portion of a dzfta product from the source to the consumer 
subsystem without conveying indicia of identification of the source, conveying being in response 
i I to a second notice that a request for the /lata product has been received by a second provided 
12 process from the consumer subsyster 



■ 



6. The method of claim 5 wherem the source comprises a multiple subsystem facility. 

7. The method of claim 6 wherein the indicia of identification of the source identifies the 
multiple subsystem facility. 

8. The method of cla&n 6 wherein the multiple subsystem facility comprises: 

a first subsystem for conveying the permit; 

a second subsystem for conveying the portion of the data product; and 
a privat/network coupling the first subsystem to the second subsystem. 



1 9. The method of claim 8 wherein the indicia of identification of the source identifies the first 

2 subsystem. 
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10. The method of claim 8 wherein the indicia of identification Jbf the source identifies the 
second subsystem. 

1 1 . The method of claim 5 wherein the permit comprises it^ms in a data structure that is 
encrypted. 

12. The method of claim 5 wherein the second request comprises at least a portion of the permit. 

13. The method of claim 5 wherein the second notice Comprises at least a portion of the permit. 

14. The method of claim 5 wherein the consumer subsystem comprises a consumer substation. 

15. The method of claim 5 wherein the consumer/subsystem comprises a browser that initiates 
the request for the permit and the request for a data product. 

16. The method of claim 5 wherein the data product comprises at least one of a digital work, a 
file, an audio recording, a video recording, ep. executable program, a document, a multimedia 
program, and content. 

17. The method of claim 5 wherein the slfep for conveying the portion of the data product 
comprises a step for downloading the data product in entirety. 



fii 18. The method of claim 5 wherein the step for conveying the portion of the data product 

2 comprises a step for streaming the data product. 

1 19. The method of claim 5 wherein the step for conveying the permit comprises a step for 

2 transferring data in a protected transfer. 

1 20. The method of claim 3 whatein the protected transfer comprises an anonymous transfer. O 



n 



1 21. The method of claim 5 wherein the step for conveying the portion of the data product 

2 comprises a step for transfenring data in a protected transfer. 



1 22. The method of claim 3/wherein the protected transfer comprises an anonymous transfer. 
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1 23. The method of claim 5 wherein the step for conveying the permit comprises: 

2 a step for detecting a prerequisite event, the event being *ft least one of receiving the first 

3 notice and determining a network address of the consumer sujzfsystem; and 

4 a step for conveying data across an interface and from a port in accordance with a 

5 protocol that denies entry into a state for transferring dat/ of the permit unless the event is 
detected. 

1 24. the method of claim 5 wherein the step for conveying the portion of the data product 

2 comprises: 

3 a step for detecting a prerequisite eventf the event being at least one of receiving the 

4 second notice, receiving at least a portion of/the permit, receiving a key for encrypting the 

5 portion of the data product, and determining a network address of the consumer subsystem; and 
yi a step for conveying data across/an interface and from a port in accordance with a 

p protocol that denies entry into a state/or transferring data of the product unless the event is 

M detected. 

Q 25. A system comprising: 

H2 means for conveying d&ta in a first protected transfer to deliver a permit; and 

ip means for conveying data in a second protected transfer to deliver a product. 



^ 26. The system of clain/25 further comprising: 

P / 

rg means for receiving at least two reports during a time period; 

3 means for grouping reports into tuples of related reports; 

4 means for determining whether a particular report remains unmatched; 

5 means for determining whether a particular tuple remains incomplete; and 

6 means lor providing notice of a breach of security in accordance with at least one of 

7 whether the j/articular report remains unmatched and whether the particular tuple remains 

8 incompleted 

1 27. A system for reducing the risk of unauthorized access to a data product, the system 

2 comprising: 
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means for conveying a permit from a source to a consumer subsystem without conveying 
indicia of identification of the source, conveying being in response to a first notice that payment 
for the permit has been assured by a first provided process, assuring being in response to 
receiving at the first provided process a request for the permi/that originated from the consumer 
subsystem, the request for the permit being without indicia/of the identification of the source; 
and 

means for conveying a portion of a data product from the source to the consumer 
subsystem without conveying indicia of identification of the source, conveying being in response 
to a second notice that a request for the data produ/t has been received by a second provided 
process from the consumer subsystem. 



1 28. The system of claim 27 wherein the soiyfce comprises a multiple subsystem facility. 
C? 29. The system of claim 28 wherein the/ndicia of identity of the source comprises indicia of 



{A identity of the multiple subsystem facility. 



30. The system of claim 28 wherein the multiple subsystem facility comprises: 
a first subsystem for conveying the permit; 

a second subsystem for conveying the portion of the data product; and 
a private network coupling the first subsystem to the second subsystem. 



1 31. The system of clainyjO wherein the indicia of identification of the source identifies the first 

2 subsystem. 

1 32. The system of <^aim 30 wherein the indicia of identification of the source identifies the 

2 second subsyster 

1 33. The system/of claim 27 wherein the permit comprises items in a data structure that is 

2 encrypted. 



1 34. The system of claim 27 wherein the second request comprises at least a portion of the permit. 
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1 35. The system of claim 27 wherein the second notice comprises a/least a portion of the permit. 



36. The system of claim 27 wherein the consumer subsystem comprises a consumer substation. 




37. The system of claim 27 wherein the consumer subsysteny comprises a browser that initiates 
2 the request for the permit and the request for a data produc 



1 38. The system of claim 27 wherein the data product comprises at least one of a digital work, a 

2 file, an audio recording, a video recording, an executable program, a document, a multimedia 
program, and content. 

39. The system of claim 27 wherein the means for Conveying the portion of the data product 
Q comprises means for downloading the data product in entirety. 

sp / 

§ 40. The system of claim 27 wherein the means' for conveying the portion of the data product 

y / 

'CD comprises means for streaming the data product. 



m 
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41 . The system of claim 27 wherein the njfeans for conveying the permit comprises means for 
transferring data in a protected transfer. 



1 42. The system of claim 41 wherein me protected transfer comprises an anonymous transfer. 

1 43. The system of claim 27 wherem the means for conveying the portion of the data product 

2 comprises means for transferring/data in a protected transfer. 



1 44. The system of claim 43 wnerein the protected transfer comprises an anonymous transfer. 
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45. The system of claim 27 wherein the means for conveying the permit comprises: 

means for detecting a prerequisite event, the event being at/east one of receiving the first 
notice and determining a network address of the consumer subsystem; and 

means for conveying data across an interface and from arport in accordance with a 
protocol that denies entry into a state for transferring data of tpe permit unless the event is 
detected. 

46. The system of claim 27 wherein the means for convey/ng the portion of the data product 
comprises: 

means for detecting a prerequisite event, the ev£nt being at least one of receiving the 
second notice, receiving at least a portion of the permit, receiving a key for encrypting the 
portion of the data product, and determining a network address of the consumer subsystem; and 

means for conveying data across an interface and from a port in accordance with a 
protocol that denies entry into a state for transfepng data of the product unless the event is 
detected. 

47. A method for reducing the risk of unauthorized access to a data product, the method 
comprising: 

a. conveying data in a first protected transfer to deliver a permit; and 

b. conveying data in a second protected transfer to deliver the data product in accordance 
with the permit. 

48. The method of claim 47 wherein Conveying to deliver a permit comprises conveying from a 
source to a consumer subsystem without conveying indicia of identification of the source, 
conveying being in response to a first notice that payment for the permit has been assured by a 
first provided process, assuring being in response to receiving at the first provided process a 
request for the permit that originated from the consumer subsystem, the request for the permit 
being without indicia of the identification of the source. 



1 49. The method of claim 48 therein conveying to deliver the data product comprises conveying 

2 a portion of a data product from the source to the consumer subsystem without conveying indicia 
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3 of identification of the source, conveying being in response to a second notice that a request for 

4 the data product has been received by a second provided process from the consumer subsystem. 




1 50. The method of claim 49 wherein the source comprises a multiple subsystem facility. 



5 1 . The method of claim 50 wherein the indicia of identity of^he source comprises indicia of 
identity of the multiple subsystem facility. 



1 52. The method of claim 5 1 wherein the multiple subsystem facility comprises: 

2 a. a first subsystem for conveying the permit; 

b. a second subsystem for conveying the portion of the data product; 

c. and a private network coupling the first subsystem to the second subsystem. 
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53. The method of claim 52 wherein the indicia of identity of the source comprises indicia of 
identity of the first subsystem. 

54. The method of claim 53 wherein the indicia/>f identity of the source comprises indicia of 
identity of the second subsystem. 

55. The method of claim 54 wherein the perjfriit comprises items in a data structure that is 
encrypted. 



1 56. The method of claim 55 wherein the /second request comprises at least a portion of the permit. 
1 57. The method of claim 56 wherein tHe second notice comprises at least a portion of the permit. 
1 58. The method of claim 57 whereii/ the consumer subsystem comprises a consumer substation. 



1 59. The method of claim 58 wherein the consumer subsystem comprises a browser that 

2 originates the request for the permit and the request for a data product. 
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1 60. The method of claim 59 wherein the data product comprises at lea^t one of a digital work, a 

2 file, an audio recording, a video recording, an executable program, ^document, a multimedia 
(\ 3 program, and content. 




61. The method of claim 60 wherein conveying the portion of th£ data product comprises 
downloading the data product in entirety. 

1 62. The method of claim 61 wherein conveying the portion ^f the data product comprises 

2 streaming the data product. 



63. The method of claim 62 wherein conveying the penhit comprises: 

a. detecting a prerequisite event, the event being at least one of receiving the first notice 
and determining a network address of the consumer imbsystem; and 

b. conveying data across an interface and from a port in accordance with a protocol that 
denies entry into a state for transferring data of thp permit unless the event is detected. 



|5 64. The method of claim 63 wherein conveying the portion of the data product comprises: 

* / 

*2 a. detecting a prerequisite event, the event being at least one of receiving the second 

2 notice, receiving at least a portion of the pemiit, receiving a key for encrypting the portion of the 

% data product, and determining a network aadress of the consumer subsystem; and 
[| b. conveying data across an interface and from a port in accordance with a protocol that 

0 denies entry into a state for transferring data of the product unless the event is detected. 

1 65. The method of claim 64 further comprising: 

2 a. receiving at least two reports during a time period; 

3 b. grouping reports into tuples of related reports; 

4 c. determining whether a particular report remains unmatched; 

5 d. determining whether a particular tuple remains incomplete; and 

6 e. providing notice of a breach of security in accordance with at least one of whether the 

7 particular report remains unmatched and whether the particular tuple remains incomplete. 



1 66. A system for communicating with a client having a client port, the system comprising: 
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a. a first port that conducts a first transaction with the client port to establish a request 
for a permit and that conducts a second transaction with the client port to establish a request for a 
data product, the request for a data product comprising at lea^t a portion of a permit, the first port 
comprising a first plurality of processes; 

b. a second port that provides a permit to the client port in accordance with the request 
for the permit, the second port comprising a second plurality of processes; 

c. a third port that provides a data product to the client port in accordance with the 
request for the data product, the third port comprising A third plurality of processes; wherein 

d. processes of the first plurality and secondmlurality are coupled to convey at least a 
portion of the request for the permit and a portion o^ the request for thedata product to the 
second plurality of processes; and 

e. processes of the second plurality and third plurality are coupled to convey at least the 
portion of the request for the data product to Wthird plurality of processes. 

;T 67. The system of claim 66 wherein the secorid port is associated with a first network address 

# and the third port is associated with a seconjfl network address. 

□ * / 

IP / 

s l 68. The system of claim 67 wherein the first port is associated with a third network address. 

P / 

jjj 69. The system of claim 68 wherein at least one of providing the permit and providing the data 

fl product comprises a data transfer according to a protocol that provides a barrier to access. 
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ll f 70. The system of claim 69 whereiiythe barrier comprises omitting information that would 
2 facilitate access beyond the permit/and the data product. 



1 71 . The system of claim 70 whe/ein the omitted information includes an identifier associated 

2 with at least one of the second bort and the third port. 



1 72. The system of claim 71 wherein the second port is enabled for providing the permit without 

2 action by the client subsequent to receiving the request for the permit. 

1 73. The system of claim ik wherein the third port is enabled for providing the data product 

2 without action by the cli/nt subsequent to receiving the request for the data product. 
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1 74. The system of claim 73 wherein at least one of the permit and tfye request for the data product 

2 comprises a network address associated with the client port. 

1 75. The system of claim 74 wherein at least two of the first por^the second port, and the third 

2 port are hosted on one processor. 

76. A system for permitting authorized access by a client arid for cooperating with a provided 
first interface that accesses a request for a permit, the request for a permit originating on the 
client, and that accesses a request for a data product, th /request for a data product originating on 
the client and comprising at least a portion of a permijr, the system comprising: 

a. a second interface that provides access of the permit across the second interface to the 
client, wherein: 

(1) the second interface compris/s a first link between the system and the client 
for delivery of the permit; and 

(2) the first link is enabled ii/accordance with at least a portion of the request for 
the permit; and 

b. a third interface that provides/access of a data product across the third interface to the 
client, wherein: 

(1) the third interfacey6omprises a second link between the system and the client 
for delivery of the data product; ; 

(2) the second lin^is enabled in accordance with at least a portion of the request 
for the data product, thereby conditionally permitting authorized access to the data product. 



2 
3 
4 
5 
6 
7 



4 
if 



1 77. The system of claim 76 wherein the data product comprises at least one of a digital work, a 

2 file, an audio recording, a /ideo recording, an executable program, a document, a multimedia 

3 program, and content. 

1 78. The system of claim 77 wherein access of a data product comprises at least one of receiving 

2 at least a portion of tlfe data product over a network, executing at least a portion of the data 

3 product, reading at feast a portion of the data product, and recalling at least a portion of the data 

4 product from a storage device. 
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